deltaspike-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From gpetra...@apache.org
Subject svn commit: r1610030 - /deltaspike/site/trunk/content/download.mdtext
Date Sat, 12 Jul 2014 19:50:47 GMT
Author: gpetracek
Date: Sat Jul 12 19:50:46 2014
New Revision: 1610030

URL: http://svn.apache.org/r1610030
Log:
updated content

Modified:
    deltaspike/site/trunk/content/download.mdtext

Modified: deltaspike/site/trunk/content/download.mdtext
URL: http://svn.apache.org/viewvc/deltaspike/site/trunk/content/download.mdtext?rev=1610030&r1=1610029&r2=1610030&view=diff
==============================================================================
--- deltaspike/site/trunk/content/download.mdtext (original)
+++ deltaspike/site/trunk/content/download.mdtext Sat Jul 12 19:50:46 2014
@@ -56,5 +56,34 @@ Details are available <a href="documenta
 
 See <a href="http://archive.apache.org/dist/deltaspike/" target="_blank">Release-Archive</a>
 
-# KEY-File
-See <a href="https://git-wip-us.apache.org/repos/asf?p=deltaspike.git;a=blob_plain;f=keys/KEYS;h=6cb2559835ca809d1eb24bbdae56bd49695b93bd;hb=015dbba89afeb9bc763da72302587695d41af7e7"
target="_blank">KEYS</a>
\ No newline at end of file
+# Verifying Releases
+
+It is essential that you verify the integrity of any downloaded files using
+the PGP or MD5 signatures.  For more information on signing artifacts and
+why we do it, check out the
+[Release Signing FAQ](http://www.apache.org/dev/release-signing.html).
+
+The PGP signatures can be verified using PGP or GPG. First download the [KEYS](http://www.apache.org/dist/deltaspike/KEYS)
+as well as the asc signature file for the artifact. Make sure you get
+these files from the
+[main distribution directory](http://www.apache.org/dist/deltaspike/),
+rather than from a
+[mirror](http://www.apache.org/dyn/closer.cgi/deltaspike/).
+Then verify the signatures using e.g.:
+
+    :::sh
+    $ pgpk -a KEYS
+    $ pgpv deltaspike-project-1.0.0-source-release.zip.asc
+
+or
+
+    :::sh
+    $ pgp -ka KEYS
+    $ pgp deltaspike-project-1.0.0-source-release.zip.asc
+
+or
+
+    :::sh
+    $ gpg --import KEYS
+    $ gpg --verify deltaspike-project-1.0.0-source-release.zip.asc
+



Mime
View raw message